Why Australian businesses need a quality management system

A quality management system (QMS) is the documented set of policies, processes and records that makes sure your work meets agreed standards every time, not just when your best people are on the job. Australian businesses need one because consistency doesn't happen by chance, and because customers, principals and auditors increasingly ask how you control quality. The common standard in Australia is AS/NZS ISO 9001:2016.

A QMS doesn't have to be a heavy system. For most small and medium businesses it is a short set of procedures, a few registers and a regular review. The value is in using it.

What a QMS does

A QMS gives you one place to set your quality targets, check that the work meets them, and fix what doesn't. It answers four questions for every process:

• What does good look like?
• How do we check it?
• Are we following the steps we wrote down?
• What do we change when something goes wrong?

Those questions map onto four stages, which are often called quality planning, quality control, quality assurance and quality improvement.

Stage 1: Quality planning

Planning sets the standard and assigns the work. Decide what your customers need, what your processes must deliver, and who owns each part. Keep the plan proportionate. A two-person electrical business and a 200-person manufacturer will need very different documents, but both should be able to say what good work looks like.

Planning also means looking ahead. Ask where a job is most likely to fail, such as a missed inspection, a wrong material or a late handover, and put a check in place before it happens.

Stage 2: Quality control

Control is the check on the work itself. It can happen at the start (is the material right?), during the job (is the joint sound?) and at the end (does the finished item meet the spec?).

Use an inspection checklist for each job type. Record the result, who did the check and when. If you test samples rather than every item, make sure the sample is large enough to mean something, and say how you chose it.

Stage 3: Quality assurance

Assurance checks the system, not just the output. Are people following the procedures? Are the records complete? Internal audits answer those questions. Run them on a fixed schedule, using an internal audit checklist that matches the clauses of the standard, and write up the findings in an internal audit report.

External audits by an accredited certification body give customers independent evidence. Internal audits are how you prepare for them and catch problems first.

Stage 4: Quality improvement

Improvement starts with a problem and ends with proof it has stopped. When something goes wrong, do three things:

1. Contain it. Stop the defect reaching the next person or customer.
2. Find the root cause. Ask "why" until you reach something you can change, such as an unclear procedure or a missing check.
3. Prevent it. Change the procedure, the training or the equipment, then check the change worked.

Record each step in a corrective and preventive action form, and use a non-conformance report for anything that doesn't meet the standard. For more on writing these well, see our guide to non-conformance reports.

The core elements of a QMS

AS/NZS ISO 9001:2016 doesn't prescribe a single document set, but it does expect you to cover the same core elements.

Quality policy

The quality policy states your commitment to quality and the direction you are heading. Keep it short, use plain language, and show it where your workers will see it. A useful policy names something specific, such as on-time delivery, defect-free handover or customer response times. "We strive for quality" tells nobody anything.

Quality objectives

Objectives are the measurable targets that show whether the policy is working. Good objectives are specific, measurable and have a date. For example:

• Reduce rework on fit-outs by 20% within 12 months.
• Close 90% of customer complaints within five working days.
• Complete all planned internal audits by the end of the financial year.

Review them against your data so you can see whether they are still the right targets.

Documents and records

ISO 9001:2015 removed the mandatory quality manual, but a short manual is still useful as a map of your system. What matters more is document control: each document has a version, an owner, a review date, and the current version is the only one people can find. A document register helps you keep track.

Roles and responsibilities

Name who approves each document, who runs each check and who makes the decision when something goes wrong. Gaps in responsibility are a common reason a QMS fails.

Data and customer feedback

A QMS runs on data. Track complaints, returns, rework, delivery performance and supplier issues. Look for trends rather than single events. If the same supplier's parts fail three times in a quarter, that is a finding, not bad luck.

Management review

Senior management should review the QMS on a regular basis and record what they decided. The review should cover objective performance, audit results, customer feedback, corrective actions and the resources the system needs. A management review meeting report gives you a consistent record. Every review should end with actions that have owners and due dates.

QMS and WHS

A QMS and a WHS system often share documents, such as training registers, incident records and audit schedules. Running them together avoids duplicate work. The Australian adoption of the occupational health and safety standard is AS/NZS ISO 45001:2018, and many businesses run both systems on one audit calendar.

If you are starting from scratch, begin with the processes that cause the most rework or the most complaints. Write those procedures, put checks in place, and review the results. Then add the rest.

How SafetyDocs helps

SafetyDocs has over 1,250 expert-written templates, including quality management plans, internal audit checklists, management review reports, document registers and corrective action forms. Job, client and site details fill in automatically, so you spend your time on the quality decisions, not the formatting.

Workers and subcontractors sign documents on any phone from a text, link or QR code, with no app or account. When a procedure changes, everyone who signed is asked to sign the new version. Each job keeps a dated activity log, so you can show what was checked, by whom and when.

A good template doesn't make your business meet the standard on its own. Use the documents to run the system, and keep the records to show it works.

Common questions

Is ISO 9001 certification required in Australia?

No. Certification is voluntary for most businesses, although some principals and government buyers ask for it. You can run a QMS that follows the standard without being certified.

What is the difference between ISO 9000 and ISO 9001?

ISO 9000 sets out the fundamentals and vocabulary of quality management. ISO 9001 sets out the requirements a QMS must meet, and it is the standard businesses are certified against.

Do I need a quality manual?

ISO 9001:2015 doesn't require one. A short manual is useful, but the system matters more than the manual. Make sure your procedures and records are controlled and up to date.

How often should I audit my QMS?

The standard doesn't set a fixed frequency. Plan internal audits across the year so that every process is checked at least once, and check more often where you have had problems.

This is general information, not legal advice. Check the current law with your WHS regulator.